Choose your testing approach, set scope or duration, and we calculate the rest. See how your pentest shapes up — with a live price estimate.
How much information does the tester start with? Always your choice — we adjust duration accordingly.
How large and complex is the environment to be tested?
Estimated testing effort in man-days
This is a rough estimate. Final pricing depends on complexity, target type, and specific requirements discussed during scoping. Man-day estimates reflect testing effort only — reporting, scoping calls, and debrief are included at no extra charge.
Crystal-box gives the tester full access to source code, architecture diagrams, and credentials — the most thorough and efficient approach. Grey-box provides partial information (user-level credentials, limited docs), balancing realism with coverage.
Black-box simulates an external attacker with zero knowledge — realistic but takes longer. Red-team is a full adversary simulation combining social engineering, phishing, and technical exploitation across multiple vectors.
Tell us about your project. We will review your configuration and respond with a tailored offer within one business day.
The estimate is a starting point based on typical engagements. Final pricing depends on target complexity (e.g. a legacy monolith vs. a modern API), specific compliance requirements, and any custom deliverables. Our team will review your configuration and provide a precise quote.
A target is a distinct testable unit: one web application, one API, one IP range/VLAN, one mobile app, or one code repository. A single server running multiple services may count as multiple targets depending on scope.
Absolutely. The wizard gives you a starting configuration. During the scoping call, we refine targets, testing windows, and exclusions together. Nothing is final until you accept the formal offer in your dashboard.
Man-days represent the total testing effort. A 10 man-day engagement could be completed by 2 testers in 5 calendar days, or 1 tester in 10 calendar days. We agree on the schedule during scoping.
No. The form above works without an account. If you already have an account, you can submit a detailed scope request directly from your dashboard at /engagements/new.